Sr. Manager, Technology Risk Management

About the role

As a Senior Manager, Technology Risk Management, you will serve as a senior individual contributor responsible for overseeing risks associated with the full technology asset lifecycle, endpoint security and resilience, enterprise mobility management, and technology configuration. Your work will help ensure critical applications and services remain within the firm’s risk appetite and are designed to protect operational continuity and client trust.

In this role, you will partner across Technology Operations, Data, Cybersecurity, Architecture, Site Reliability Engineering, Compliance, and Corporate Risk Management to identify emerging risks, evaluate controls, and strengthen resilience requirements within existing processes and technologies. You will use sound judgment to challenge risk decisions, advise stakeholders, and influence solutions that balance business priorities with effective risk management. You will also translate complex risk information into clear reporting and recommendations for senior leaders and management committees. By developing meaningful metrics, monitoring program maturity, and identifying opportunities for continuous improvement, you will help the firm make informed decisions and strengthen its technology and cyber resilience capabilities as risks, regulations, and industry practices continue to evolve.

Responsibilities

• Oversee risks associated with the full technology asset lifecycle, endpoint security and resilience, enterprise mobility management, and technology configuration.
• Partner with Technology Operations, Data, Cybersecurity, Architecture, Site Reliability Engineering, Compliance, and Corporate Risk Management to identify emerging risks and evaluate controls.
• Strengthen resilience requirements within existing processes and technologies.
• Use sound judgment to challenge risk decisions and advise stakeholders.
• Influence solutions that balance business priorities with effective risk management.
• Translate complex risk information into clear reporting and recommendations for senior leaders and management committees.
• Develop meaningful metrics, monitor program maturity, and identify opportunities for continuous improvement.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 5+ years of experience in third-party risk management, information security risk management, audit, oversight, SOX testing, operational risk management, or a similar risk and control function.
• Experience identifying, assessing, monitoring, and communicating technology or cybersecurity risks.
• Experience negotiating information security terms and conditions and providing effective challenge on technology and cyber resilience risks.
• Demonstrated ability to apply independent judgment, analytical thinking, and structured problem solving to complex risk decisions.
• Ability to communicate complex technical and risk information clearly to senior leaders, technical teams, business partners, and risk management stakeholders.
• Ability to manage multiple priorities independently while collaborating across functions in a fast-paced environment.

Preferred Qualifications

• CISM, CISSP, CRISC, CISA, or PMP certification.
• Experience with technology asset lifecycle practices, including planning, acquisition, deployment, management, and retirement.
• Knowledge of endpoint security, endpoint resilience, enterprise mobility management, and enterprise or service configuration.
• Understanding of cybersecurity frameworks and assurance standards, including NIST, ISO 27001, and SOC 2.
• Experience developing risk metrics, management reporting, and program maturity insights that support informed decision-making.
• Experience providing risk oversight for technology platforms, critical applications, or operational resilience programs.
• Experience developing or evaluating cyber recovery strategies within a large financial services organization.
• Demonstrated success influencing stakeholders, building collaborative relationships, and strengthening risk and control processes without direct authority.
• Ability to adapt to emerging threats, regulatory expectations, and changing business priorities while maintaining high standards for quality and execution.

Benefits

• 401(k) with company match and Employee Stock Purchase Plan.
• Paid time for vacation, volunteering, and a 28-day sabbatical after every 5 years of service for eligible positions.
• Paid parental leave and family building benefits.
• Tuition reimbursement.
• Health, dental, and vision insurance.

In addition to the salary range, this role is eligible for bonus or incentive opportunities.

Hybrid work and flexibility approach balances workplace flexibility, serving clients, and in-person collaboration.